Buffer overflow in Netscape/Mozilla

Buffer overflow on irc:// URL parsing...

CVE-1999-1351

CVE-1999-1351 describes a directory traversal flaw in the KVIrc IRC client (version 0.9.0) when the “Listen to !nick requests” option is enabled. An attacker can read arbitrary files by injecting ‘..’ in a DCC GET request. The vulnerability is rooted in improper path handling during DCC GET proc...

CVE-1999-0968

Buffer overflow in BNC IRC proxy allows remote attackers to gain privileges...

CVE-1999-0968

CVE-1999-0968 describes a buffer overflow in the BNC IRC proxy that allows remote attackers to gain privileges. The affected component is the BNC IRC proxy; the underlying cause is a buffer overflow vulnerability. The initial sources do not provide version-specific details, exploit vectors, explo...

CVE-2001-1056

The CVE affects the ip_masq_irc IP masquerading module 2.2. A remote attacker can bypass firewall restrictions by inducing the target to send a DCC SEND to a malicious server listening on port 6667, which may cause the module to treat that traffic as valid and permit the connection to the port sp...

CVE-1999-1351

Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick requests" option enabled allows remote attackers to read arbitrary files via a .. dot dot in a DCC GET request...

CVE-2002-0060

IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictions...

Linux kernel netfilter IRC DCC helper module creates overly permissive firewall rules

Overview The "netfilter" firewall subsystem included with Linux kernel versions 2.4.x contains a vulnerability that may allow remote attackers to reach hosts that should be protected. Description The "netfilter" subsystem included with Linux kernel versions 2.4.x provides a framework for services...

Important: Red Hat Security Advisory: : Updated 2.4 kernel available

The Linux Netfilter team has found a problem in the "IRC connection tracking" component of the firewall within the linux kernel. This problem affects Red Hat Linux versions 7.1 and 7.2. The Linux Netfilter team has found a problem in the IRC connection tracking component of the firewall within th...

Проблемы с ip_conntrack_irc в ядре linux

При исходящем IRC-соединении открывается порт на всех Ip-адресах сервера...

security advisory linux 2.4.x ip_conntrack_irc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Important security announcement of the netfilter project, 25 Feb 2002 http://www.netfilter.org/security/2002-02-25-irc-dcc-mask.html. SUBJECT: IRC connection tracking helper module SUMMARY: IRC connection tracking opens unwanted ports SYSTEM: All Linu...

psyBNC 2.3 Beta - encrypted text "spoofable" in others' irc terminal

BACKGROUND: psyBNC http://www.psychoid.lam3rz.de is an IRC bouncer with a variety of fantastic features. one of these features in encryption of irc text, with keys set on a per-channel basis. SUMMARY: someone call them person A in an irc channel where psyBNC users are chatting encrypted can...

Security updates: at, sudo, xchat

New packages are now available to address security issues with the at scheduler program found in Slackware 8.0's bin.tgz package, sudo, and xchat. Here's the information from the Slackware 8.0 ChangeLog: Mon Jan 21 13:21:07 PST 2002 patches/packages/at.tgz: Fixed a buffer overflow. Security fix...

[SECURITY] [DSA 099-1] New XChat packages fix potential IRC session hijacking

Attachment: pgpZ3fmunBQVe.pgp Description: PGP message...

xchat IRC session hijacking vulnerability (versions 1.4.1, 1.4.2)

========================================================================== ======= xchat 1.4.2 and 1.4.3 IRC session hijacking vulnerability ======== ========================================================================== It is possible to trick xchat IRC clients 1.4.2, 1.4.3 into sending...

CVE-2001-1488

Open Projects Network Internet Relay Chat IRC daemon u2.10.05.18 does not perform a double-reverse DNS lookup, which allows remote attackers to spoof any valid hostname on the Internet. NOTE: a followup post suggests that this is not an issue in the daemon...

Remote DoS in 6tunnel

SUMMARY 6tunnel is a simple tunneling program for applications that don't speak IPv6. It's most used as an IRC proxy for clients without IPv6 support. A serious vulnerability in this program allow any user to crash 6tunnel locally and in some cases remotely. SYSTEM / VERSIONS AFFECTED Older...

CVE-1999-1228

CVE-1999-1228 concerns various modems that do not implement a guard time or use a 0 guard time, enabling remote attackers to execute commands (e.g., ATH, ATH0) via a "+++" sequence embedded in ICMP packets, email subject lines, IRC, and more. Connected sources provide concrete details: exploitati...

HTML Form Protocol Attack

Some HTML browsers can be tricked through the use of HTML forms into sending more or less arbitrary data to any TCP port. This can be used to send commands to servers using ASCII based protocols like SMTP, NNTP, POP3, IMAP, IRC, and probably others. By sending HTML email to unsuspecting users or...

CVE-2001-0050

Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary commands via an IP address that resolves to a long DNS hostname or domain name...